CVEvulnerability
CVE-2013-4052
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-09-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the UDDI Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm websphere application server 6.1
• ibm websphere application server 6.1.0
• ibm websphere application server 6.1.0.0
• ibm websphere application server 6.1.0.1
• ibm websphere application server 6.1.0.2
• ibm websphere application server 6.1.0.3
• ibm websphere application server 6.1.0.5
• ibm websphere application server 6.1.0.7
• ibm websphere application server 6.1.0.9
• ibm websphere application server 6.1.0.11
• ibm websphere application server 6.1.0.12
• ibm websphere application server 6.1.0.13
• ibm websphere application server 6.1.0.14
• ibm websphere application server 6.1.0.15
• ibm websphere application server 6.1.0.17
• ibm websphere application server 6.1.0.19
• ibm websphere application server 6.1.0.21
• ibm websphere application server 6.1.0.23
• ibm websphere application server 6.1.0.25
• ibm websphere application server 6.1.0.27
• ibm websphere application server 6.1.0.29
• ibm websphere application server 6.1.0.31
• ibm websphere application server 6.1.0.33
• ibm websphere application server 6.1.0.35
• ibm websphere application server 6.1.0.37
• ibm websphere application server 6.1.0.39
• ibm websphere application server 6.1.0.41
• ibm websphere application server 6.1.0.43
• ibm websphere application server 6.1.0.45
• ibm websphere application server 7.0
• ibm websphere application server 7.0.0.1
• ibm websphere application server 7.0.0.2
• ibm websphere application server 7.0.0.3
• ibm websphere application server 7.0.0.4
• ibm websphere application server 7.0.0.5
• ibm websphere application server 7.0.0.6
• ibm websphere application server 7.0.0.7
• ibm websphere application server 7.0.0.8
• ibm websphere application server 7.0.0.9
• ibm websphere application server 7.0.0.10
• ibm websphere application server 7.0.0.11
• ibm websphere application server 7.0.0.12
• ibm websphere application server 7.0.0.13
• ibm websphere application server 7.0.0.14
• ibm websphere application server 7.0.0.15
• ibm websphere application server 7.0.0.16
• ibm websphere application server 7.0.0.17
• ibm websphere application server 7.0.0.18
• ibm websphere application server 7.0.0.19
• ibm websphere application server 7.0.0.21
• ibm websphere application server 7.0.0.22
• ibm websphere application server 7.0.0.23
• ibm websphere application server 7.0.0.24
• ibm websphere application server 7.0.0.25
• ibm websphere application server 7.0.0.27
• ibm websphere application server 7.0.0.29
• ibm websphere application server 8.0.0.0
• ibm websphere application server 8.0.0.1
• ibm websphere application server 8.0.0.2
• ibm websphere application server 8.0.0.3
… and 8 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM91892 www-01.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg21647522 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86504 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM91892 www-01.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg21647522 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86504 exchange.xforce.ibmcloud.com